removal of mxtarget.dll is impossible! plese help!

[jon_jon]

i cant get rid of it!!

i run noadware 2.0.. it tells me i have twaintech under my HKEY_LOCAL_MACHiNE 0000607D-D204-42C7-8E46-216055BF9918. This is also impossible to delete..

along with mxtarget.dll under C:/Windows

i went into safe mode to delete mxtarget.dll and twain.dll, made sure i turned off system restore, and it is still here!!

:mad: HELP ME PLEASE!!! LOL.. THIS IS DRIVING ME CRAZY AND ITS BEEN ALMOST A WEEK I HAVE BEEN TRYING TO GET RID OF IT!

I figured that noadware would get rid of this for me automatically since i am payin and all, guess not!

oh and i seem to have a new one now called IEPLUGIN
never seen that one before :confused:

[ECA]

Progs we suggest:
Spyware blaster
Spybot
Adaware.

Try these first..

[jon_jon]

i tried them all!! nothing works! im gonna throw my fu**ing computer through A window! heres my log

Logfile of HijackThis v1.98.0
Scan saved at 8:42:30 PM, on 7/10/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINDOWS\System32\smss.exe
c:\windows\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Voyetra\AudioSurgeon 5\asurscsi.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\MsgSys.EXE
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\QUICKENW\QAGENT.EXE
C:\PROGRA~1\NavNT\vptray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\ljasjegc.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\System32\mrtMngr.EXE
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Documents and Settings\jon\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dellnet.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = http://localhost;
R3 - Default URLSearchHook is missing
F0 - system.ini: Shell=
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
O2 - BHO: (no name) - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - (no file)
O2 - BHO: (no name) - {0000607D-D204-42C7-8E46-216055BF9918} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (disabled by BHODemon)
O2 - BHO: Curl - {A78CC2FF-6E4E-4556-B27C-D7C3A70D7A50} - C:\WINDOWS\SYSTEM32\NDrv.dll (disabled by BHODemon)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1629.0\en-us\msntb.dll
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [QAGENT] C:\Program Files\QUICKENW\QAGENT.EXE
O4 - HKLM\..\Run: [MCAgentExe] C:\Program Files\McAfee.com\Agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\McUpdate.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\NavNT\vptray.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ulktkdfftcfds] C:\WINDOWS\System32\ljasjegc.exe
O4 - HKLM\..\RunOnce: [Ad-aware] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe" "+b1"
O4 - HKCU\..\Run: [SpyKiller] C:\Program Files\SpyKiller\spykiller.exe /startup
O4 - HKCU\..\Run: [Aida] C:\Documents and Settings\jon\Application Data\ttuh.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Lotus Organizer EasyClip.lnk = ?
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/PopularScreenSaversInitialSetup1.0.0.8.cab
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540000} (CInstall Class) - http://www.spywarestormer.com/files2/Install.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {B9EAA7F1-934A-11D0-958A-0060975AE865} (OFX Parser Class) - http://fdl.msn.com/public/investor/v13/ofx/ofxpb.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab

[Ioman]

What are these?

C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\System32\ljasjegc.exe
C:\Program Files\Digital Line Detect\DLG.exe

Try deleting:

O4 - HKLM\..\Run: [ulktkdfftcfds] C:\WINDOWS\System32\ljasjegc.exe

R3 - Default URLSearchHook is missing

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe

O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab

O16 - DPF: {B9EAA7F1-934A-11D0-958A-0060975AE865} (OFX Parser Class) - http://fdl.msn.com/public/investor/v13/ofx/ofxpb.cab

O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540000} (CInstall Class) - http://www.spywarestormer.com/files2/Install.cab


You have way too much stuff installed on your computer. Uninstall anything you do not use, including things you THINK you will use but never do. If you do not recognize it under add/remove programs, then uninstall it. Your log file is too difficult for me to read.

[ECA]

I have to ask this...
How long does your comp take to start...
You have ALOT of messanger progs starting at boot...
Stop them, it aint worth it.. bring UP what you wish AFTER you boot. not during...
Windows gets confused enough, with out help. And it could save you about 1-2 minutes load time...

[golfmom]

Having the same problem. Have removed with Aluria's Spyware Eliminator and Spy Killer, but even though they are "removed" and don't show up on subsequent scan, they appear on scan several minutes later and I can still see them on machine. Have even gone through the steps to remove from registry manually...several times...and have attempted to unregister in dos, but get error message that program does not exist on machine. Not in add/remove, so can't remove that way, but get error message when I try to delete mxtarget.dll. I can, however, move it to other folders and had hoped that putting it in temp folder and using Aluria's delete temp files function on cleaning would do the trick. Any suggestions?

[ECA]

Umm,
If you run spybot in advanced mode, is shows a few NICE tools.
Including a startup sequence, and a section of progs from the reg..
Try it out..

[widow]

I'm being annoyed with the same problem, here's a link that might help

http://www.pestpatrol.com/pestinfo/m/mx-targeting.asp

I have yet to go through the steps, but it seems like the answer

[ECA]

widow, this is 1.5 months old.. keep looking..

[waltgerris]

I signed up here, specifically for this gosh darn thing.

I have two things that keep coming back vx2, twain tech....guh major pain in the you know what. Adaware, spybot and spyware doctor detect and "remove" but remove seems to only get rid of current process, not it's root process.

[martha roberts]

how do i get rid of this pop_up...www.ad-w-a-r-e.com/callback_ron.php....i have tried everything

[ECA]

Walt, Martha...
Start another thread...
GET, UPDATE AND RUN....... Spywareblaster, Spybot, and LAST get current version of Hijackthis... POST the hijack FULL list..

[nightowl]

Thats the same problem oceanview has. Must be something new.........Jim :eww

[nightowl]

1. Need to install the new version of AdAware called AdAware SE. Its free!

download it here

http://www.download.com/3001-8022-10319876.html?idl=n

2. Download the VX2 Cleaner plug-in for Adaware.

http://www.lavasoft.de/
Seems like the link took me to the home page. On the left under Software click on add-ons, Then on the right click on VX2 Cleaner and it should take you to the download page.


3.Open Adaware SE

Go to “Plug-ins”
Select the VX2 Cleaner plug-in and click “Run Plugin”
If your computer isn’t infected, click “Close”.

4.If your computer is infected

Select “Clean System”
Reboot your computer
Scan your computer with Ad-Aware
Remove any VX2 objects detected
Reboot your computer again
Run a second scan to make sure the files have been removed from your computer.


Let us know if this way works..........Jim :eek:

[sweetjameela]

I found a very good program to get rid or spyware, it has a encyclopedia of more than 500 common spyware, adaware, trojans and so on......this is the site where you can download the program, its call Bazooka :)

http://www.kephyr.com/



Hope this helps someone.....Take care ;)


Sweet J

[ECA]

I'll look, but I know another site that may be better..
And Spybot has deffintions of over 23,000...............
http://startup.iamnotageek.com/search.php